General
- Target 2026-07-20_89b2ef58016cbeb1854b61a944a10991_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.5MB
- Sample260720-s6tmxagy71
- SHA256 bf3cf7aef631a219e10dfbc718ebe665213b5c036771269259238a3f41d9775f
- MD5 89b2ef58016cbeb1854b61a944a10991
- SHA1 641a9562262756bc8766bb5f4bef5902a4cd9220
- SHA512 2c27582612d2fd6ed3496ae6cca4c092eb023f1f1bc9ffbcda7e64f7b111497691dc5e6b3c4a22aa243db647f4e603bf20675cb9f98c061291f6d203c7624a40
- SSDEEP 24576:yYJ9bq/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:yYJtqLNiXicJFFRGNzj3
- TLSH T1DA75026171C084B2EAB7043509B89671AA7CFD354F2548EBA3943B6E5A347D1CE38773
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_89b2ef58016cbeb1854b61a944a10991_amadey_elex_hellokitty_luca-stealer_njrat_play.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_89b2ef58016cbeb1854b61a944a10991_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.5MB
- SHA256 bf3cf7aef631a219e10dfbc718ebe665213b5c036771269259238a3f41d9775f
- MD5 89b2ef58016cbeb1854b61a944a10991
- SHA1 641a9562262756bc8766bb5f4bef5902a4cd9220
- SHA512 2c27582612d2fd6ed3496ae6cca4c092eb023f1f1bc9ffbcda7e64f7b111497691dc5e6b3c4a22aa243db647f4e603bf20675cb9f98c061291f6d203c7624a40
- SSDEEP 24576:yYJ9bq/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:yYJtqLNiXicJFFRGNzj3
- TLSH T1DA75026171C084B2EAB7043509B89671AA7CFD354F2548EBA3943B6E5A347D1CE38773
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1